Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yOnjK3v9pqqxSNt2vzDya9wda4w.roa
File: yOnjK3v9pqqxSNt2vzDya9wda4w.roa (raw, json)
Hash identifier: 99vC8vMoFiYORD0934+7ROIrgm/Z703+qVLMKu8Jcnk=
Subject key identifier: C8:E9:E3:2B:7B:FD:A6:AA:B1:48:DB:76:BF:30:F2:6B:DC:1D:6B:8C
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E3A16EEAC5B2D591BA69C13D7A746D2F5
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yOnjK3v9pqqxSNt2vzDya9wda4w.roa
Signing time: Wed 13 Mar 2024 23:12:45 +0000
ROA not before: Wed 13 Mar 2024 23:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3a:16:ee:ac:5b:2d:59:1b:a6:9c:13:d7:a7:46:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 13 23:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8e9e32b7bfda6aab148db76bf30f26bdc1d6b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:0c:3c:d7:a8:ee:c8:81:7f:e4:ca:06:df:
4e:7e:db:33:2b:40:ff:2d:f0:ff:96:bc:27:c5:40:
97:bb:9d:71:66:fb:0b:df:a0:35:b0:f5:76:39:e7:
3f:a6:d5:d2:84:41:48:58:f2:c3:ed:d2:6c:86:b0:
b7:81:47:d1:42:83:28:ed:48:0f:33:30:cd:f3:18:
b0:1e:06:25:48:da:86:b4:2b:51:84:cc:81:21:e3:
3f:1a:18:ce:2a:3f:b2:1e:1e:50:e3:3d:b5:43:82:
21:f8:68:c4:99:3d:dd:9c:3f:06:be:18:1d:1a:6f:
aa:fe:ab:ea:9e:3b:d8:c7:b6:20:5c:32:31:e2:c5:
83:61:f6:5e:3f:9b:57:9d:cf:08:ef:2f:d7:df:8c:
81:cc:36:2b:eb:41:6e:8d:27:22:eb:b9:75:39:c2:
33:e7:69:d5:a4:d5:c0:e4:ad:e0:62:e4:3f:b2:3a:
4a:e7:a3:6d:a3:28:6d:56:b1:44:2f:86:b5:02:f5:
9e:10:79:43:47:e1:50:55:53:e3:50:53:14:49:dd:
55:82:7e:a1:21:32:08:27:ef:4e:34:6d:1d:4e:a0:
75:d6:cd:af:2e:46:af:3b:da:ae:ab:aa:d4:80:12:
15:37:02:53:f3:7f:1c:c7:10:15:a5:ab:46:18:32:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E9:E3:2B:7B:FD:A6:AA:B1:48:DB:76:BF:30:F2:6B:DC:1D:6B:8C
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/yOnjK3v9pqqxSNt2vzDya9wda4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:a0:2e:93:20:96:d1:99:f9:30:9c:c5:c5:01:25:1c:2b:60:
dd:ac:e4:78:1f:54:5c:e3:e5:50:4e:bc:ea:cc:00:34:9a:c7:
0a:93:81:68:56:10:19:03:71:05:b8:e5:14:9d:4b:7f:5f:d2:
d2:84:2e:ea:de:b1:07:bf:a9:6b:6a:80:85:40:24:63:71:4e:
6c:07:82:64:e0:1b:f2:eb:1b:b6:35:ba:0b:b9:d4:6c:fd:b2:
83:4f:94:d8:bb:09:0f:13:20:93:55:dc:45:89:40:ef:9b:18:
41:22:ef:81:bd:e3:2a:41:23:42:b3:8f:c2:e2:61:12:6e:47:
6e:ee:bf:ef:24:41:5d:fd:2f:58:af:6d:a9:32:f0:11:c8:c1:
21:9e:06:21:98:03:d1:22:9e:b7:8f:22:08:fd:2a:92:1a:dd:
08:9e:75:02:f1:15:a8:0c:e9:41:51:0f:ee:79:f8:13:c9:28:
b2:5f:6b:4f:66:9c:93:82:27:38:b7:08:b1:c0:a8:0d:8e:c6:
55:69:09:3e:3b:e0:61:7a:ac:54:52:0d:cd:67:f4:33:f7:03:
29:5e:87:bd:fd:77:fd:bd:57:82:3e:a3:b8:a9:59:42:50:c1:
b9:ff:85:6a:da:7f:25:15:50:37:ec:1f:01:49:a0:89:93:24:
bb:55:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:37:15 2025 by rpki-client